Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
File: udCVzONbOja-8QjvdipiGvRmJiE.mft (raw, json)
Hash identifier: qPSranPqFB3TVLW/y/GJgiOKdhcfh5c56vKrcTP+caU=
Subject key identifier: BB:BE:F8:E0:A7:48:2A:F4:2F:D0:C8:07:F9:89:48:CF:06:38:32:14
Authority key identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
Certificate issuer: /CN=b9d095cce35b3a36bef108ef762a621af4662621
Certificate serial: 0194BBCEE0B316F0F0829FD950B563F481D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
Manifest number: 017E
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: udCVzONbOja-8QjvdipiGvRmJiE.crl (hash: SOwlPPFAtLHDflmdDQxT/zwHSPF1Rt3tHyHTq1X+LQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e0:b3:16:f0:f0:82:9f:d9:50:b5:63:f4:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d095cce35b3a36bef108ef762a621af4662621
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=bbbef8e0a7482af42fd0c807f98948cf06383214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:72:3e:bb:88:62:27:32:2f:46:e7:fe:f7:
b0:c4:2e:f1:da:5f:35:4f:e7:41:8d:86:cf:1a:92:
2f:e0:67:65:8f:af:83:77:c6:b4:2a:34:ea:34:c3:
ff:7f:92:e3:d2:89:1d:98:f4:d0:c6:48:eb:15:ad:
8f:70:b5:30:14:ef:ab:7a:16:ee:fc:51:95:b3:1f:
6f:59:b4:bb:a5:4b:40:ce:b4:a8:67:56:d9:b7:16:
05:95:08:8d:e6:3c:98:7d:ee:7c:46:c2:d5:cf:bc:
00:16:d7:27:73:fe:ed:dc:7d:6c:8f:d6:c3:b1:1b:
87:ab:b5:17:7a:f6:7c:17:3c:be:01:28:7d:ac:e2:
5b:88:b1:60:12:11:f9:48:ad:e1:26:e4:2f:f0:61:
67:33:af:09:4f:9a:f4:a6:91:69:a2:e4:df:1f:81:
52:00:67:6c:dc:97:89:49:24:02:b3:54:a6:7a:b1:
ae:aa:ab:28:2e:cb:e1:73:05:29:c3:72:90:d2:e6:
16:08:ea:f7:95:4f:57:fd:15:b3:74:91:27:f9:e7:
18:74:65:45:5e:9e:36:1a:e5:44:6e:79:41:99:46:
be:31:f7:f0:47:34:fe:75:4d:93:0f:63:c1:07:f1:
ad:b4:5e:5d:50:97:52:aa:a8:c2:81:19:b2:df:dd:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:F8:E0:A7:48:2A:F4:2F:D0:C8:07:F9:89:48:CF:06:38:32:14
X509v3 Authority Key Identifier:
keyid:B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b1:84:82:5a:6c:c4:3b:82:d8:6b:2b:d2:c0:dd:9e:fa:a0:
85:e9:14:c0:a3:29:17:a9:59:f2:d1:70:f4:da:a7:bf:0c:68:
3f:0a:48:59:a6:fa:62:5d:f5:32:5c:53:06:dc:c9:b5:b9:12:
e2:64:fa:c2:69:3e:0f:f8:d1:38:d4:bc:af:61:b5:71:7a:1f:
9d:7c:16:46:d8:52:9e:bd:db:70:24:1a:f5:ac:3b:6d:5a:60:
47:60:20:40:bf:5f:db:f6:de:19:8e:97:52:83:fc:11:22:2b:
09:4a:66:0a:e6:ea:a4:2c:cc:2d:6c:dc:cf:80:74:20:aa:f4:
0c:02:e9:b1:10:90:22:88:bd:47:cf:15:a7:c5:82:88:4c:a8:
e5:e1:c4:54:fe:67:87:09:cc:86:e8:8d:d1:dc:24:2d:6e:d6:
25:ab:67:7a:48:c6:b0:8c:2a:62:af:38:d1:e5:86:1f:7a:e6:
82:48:90:96:3a:5e:b5:8d:33:39:fc:a0:1a:6c:ae:e2:2c:2a:
94:c9:5f:1e:3f:e0:ca:a0:ee:48:e4:c6:86:22:7a:9c:0f:62:
e7:22:3f:db:c7:6a:a1:6a:33:13:12:55:a9:0a:6a:54:c9:c0:
5e:94:fb:b9:4b:60:72:ed:85:8f:31:e4:4d:74:93:76:2a:75:
7d:b1:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:59 2025 by rpki-client